Privacy Policy

1. Who we are and the scope of this policy

CanalPulse is a multi-tenant software service that helps seller businesses manage their e-commerce operations across marketplaces (listings, orders, inventory, messaging, analytics, and billing).

This policy explains how we handle personal data in two capacities:

• As a data Controller — for the personal data of our own account holders (the people who register for and use CanalPulse, and our billing contacts).
• As a data Processor — for the personal data that our customers (seller businesses, the Controllers) instruct us to process on their behalf, including data reached through connected marketplaces and partner platforms (e.g. buyer order and message data). For that data, the seller is the Controller; we process it only to provide the service, on their instructions, and never for our own purposes.

2. Personal data we process

As Controller (our users):

• Account and identity data (name, email, authentication identifiers, managed via our authentication provider).
• Billing contact and subscription metadata.
• Usage and diagnostic data necessary to operate and secure the service.

As Processor (on behalf of sellers):

• Marketplace order data (e.g. buyer name, shipping address, contact details, order contents).
• Buyer messages and questions (free text that may contain personal data).
• Seller account credentials for connected channels (stored encrypted).

We do not sell, rent, or repurpose personal data.

3. Purposes and legal bases

We process personal data to:

• Provide, operate, secure, and support the CanalPulse service.
• Synchronize listings, orders, inventory, and messages for the seller.
• Provide analytics, reorder, and cashflow features to the seller.
• Bill for the service and comply with legal obligations.

Legal bases include performance of a contract, our and our customers’ legitimate interests in operating the service securely, consent where required, and compliance with legal obligations (including Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties, LFPDPPP). For data processed on behalf of a seller, the seller’s legal basis and instructions govern.

4. How we share data (sub-processors)

We use vetted third-party sub-processors to deliver the service, under contractual data-protection obligations:

We do not sell personal data or share it with third parties for their own marketing.

5. International data transfers

CanalPulse’s infrastructure and certain sub-processors are located in the United States; connected marketplaces may be located in other regions. Where data is transferred across borders, we rely on appropriate safeguards and process the data only as described in this policy.

6. Data retention and deletion

• We retain personal data while the relevant account is active.
• On account closure or channel disconnection, we delete the associated personal data and revoke stored credentials.
• Encrypted backups expire automatically on a 30-day rolling retention.

7. Security

We protect personal data with technical and organizational measures, including: encryption in transit (TLS) and encryption of credentials and backups at rest; multi-tenant isolation (database Row-Level Security); authenticated, least-privilege access; network protection at the edge; monitoring; and an incident response process.

8. Your rights

Depending on your location and applicable law, you may have rights to access, rectify, delete, or object to/restrict the processing of your personal data (under LFPDPPP, the “ARCO” rights: Access, Rectification, Cancellation, and Opposition), and to withdraw consent.

• If you are one of our account users, contact us at [email protected].
• If your data is processed by us on behalf of a seller (e.g. you are a buyer on a marketplace), please contact that seller, who is the Controller; we will assist them in fulfilling your request.

9. Data breach notification

If a personal-data breach affects your data, we will notify affected customers (and, where applicable, partners and regulatory authorities) promptly, in accordance with our Incident Response Policy and applicable law.

10. Children

CanalPulse is a business tool and is not directed to children.

11. Changes to this policy

We may update this policy; the “Last updated” date reflects the latest version and material changes will be communicated as appropriate.

12. Contact

Questions or requests regarding this policy or your personal data:

[email protected]
Quantum Soluciones de Tecnología y Hardware S.A. de C.V.